← Browse

@mastra-ai/mcp

B

MCP server package @mastra/mcp

mcp_servermcp

Install

agr install @mastra-ai/mcp --target claude

This artifact does not publish files for Claude.

Document

{ "name": "@mastra/mcp", "version": "1.15.1", "description": "", "type": "module", "main": "dist/index.js", "types": "dist/index.d.ts", "files": [ "dist", "CHANGELOG.md" ], "exports": { ".": { "import": { "types": "./dist/index.d.ts", "default": "./dist/index.js" }, "require": { "types": "./dist/index.d.ts", "default": "./dist/index.cjs" } }, "./package.json": "./package.json" }, "scripts": { "build:lib": "tsdown --silent --config tsdown.config.ts", "prepack": "tsx ../../scripts/generate-package-docs.ts", "build:watch": "pnpm build:lib --watch", "test:client": "vitest run ./src/client/client.test.ts ./src/client/configuration.test.ts ./src/client/oauth.test.ts ./src/client/oauth-callback-server.test.ts ./src/client/oauth-flow.test.ts", "test:server": "vitest run ./src/server", "test:integration": "cd integration-tests && pnpm test:mcp", "test": "pnpm test:server && pnpm test:client && pnpm test:integration", "lint": "oxlint . && eslint .", "lint:fix": "oxlint --fix . && eslint --fix ." }, "keywords": [], "author": "", "license": "Apache-2.0", "dependencies": { "@modelcontextprotocol/ext-apps": "^1.7.1", "@modelcontextprotocol/sdk": "^1.29.0", "exit-hook": "^5.1.0", "fast-deep-equal": "^3.1.3" }, "peerDependencies": { "@mastra/core": ">=1.0.0-0 <2.0.0-0" }, "devDependencies": { "@hono/node-server": "^1.19.14", "@internal/ai-sdk-v5": "workspace:", "@internal/lint": "workspace:", "@internal/llm-recorder": "workspace:", "@internal/test-utils": "workspace:", "@internal/types-builder": "workspace:", "@mastra/core": "workspace:", "@mastra/observability": "workspace:", "@mastra/schema-compat": "workspace:", "@mendable/firecrawl-js": "^1.29.3", "@types/node": "22.20.1", "@vitest/coverage-v8": "catalog:", "@vitest/ui": "catalog:", "ai": "^5.0.221", "eslint": "^10.7.0", "get-port": "^7.1.0", "hono": "^4.12.8", "hono-mcp-server-sse-transport": "0.0.7", "tsdown": "0.22.9", "tsx": "catalog:", "typescript": "catalog:", "vitest": "catalog:", "zod": "catalog:", "zod-to-json-schema": "^3.25.1" }, "homepage": "https://mastra.ai", "repository": { "type": "git", "url": "git+https://github.com/mastra-ai/mastra.git", "directory": "packages/mcp" }, "bugs": { "url": "https://github.com/mastra-ai/mastra/issues" }, "engines": { "node": ">=22.13.0" } }

Trustgrade B

  • passBody integrity

    Whether the stored document is plausibly the kind of file the artifact declares, rather than something fetched by mistake.

  • warnType matchbest-effort: server code not analyzed

    Whether the artifact is really the kind of thing its metadata claims it is.

  • passFreshness

    How long since the source repository was last pushed to.

  • passPrompt injection

    Scans the artifact's own text for instructions aimed at your agent rather than at you.

  • warnLicenseno SPDX license detected

    Whether the source repository declares an SPDX license permissive enough to redistribute.

How the grade is calculated

Each check contributes 0 points when it passes, 1 when it warns, and 2 when it fails. The total maps to a letter:

  • Aevery check passed
  • Bone warning
  • Ctwo warnings
  • Dprompt injection or body integrity failed, or three warnings
  • Fone of those failed, and something else is wrong

These are automated hygiene checks, not a security audit, and not a dependency or vulnerability scan. A grade of A means nothing was flagged — not that the artifact is safe.

Versions

  • git-2f2fdb3ad9b22026-08-06